Dynamoo's Blog

I really hate these scumbags: IMPORTANT - You could be entitled up to £4856 in compensation from mis-sold PPI on credit cards or loans...

This is the second malicious spam run of the day, leading to a malware payload on 72.14.187.169 Date :      Tue, 6 Mar 2012 14:00:18 +0200...

It's lunchtime here.. which means that the malware spam campaigns tend to kick off. One of these is this Intuit.com spam: Date :   ...

It's Monday.. so it's malware. This new spam run is supposed to be from Intuit.com, but it actually leads to malware hosted on cog...

Here's a normal looking BBB spam, which typically would lead to malware: From :     Milford Finn risk@bbb.org Date :     5 March 2012...

AVB Logistic Company (avb-logistic.com) looks very much like a real company from the website, but in fact it is a scam operation laundering...

This "USPS-Notification" spam uses a goo.gl redirector to go to pclr.timingexpress.ru then a malware site hosted on 199.19.215.13...

Another BBB spam run is in progress leading to malware, this time the payload is on bitebird.org/search.php?page=73a07bcb51f4be71 hosted ...

Linode feature so often on this blog that they have their own tag . OK, they're not the worst hosting company in terms of malicious site...

The past couple of days have seen a lot of identical "Intuit.com" spam runs. Another one is starting up today with a malicious p...

The Spam Analysis blog has an excellent post analysing what is happening behind the scenes in the malware from some recent spam runs. I...

Another fake Intuit order email leading to malware: From: INTUIT INC. [mailto:support@careerbuilder.com] Sent: 01 March 2012 15:26 S...

Two different spams with the same payload, the first featuring a massive failure of competency: Date :      Thu, 1 Mar 2012 18:34:39 ...

This fake "Intuit order" spam leads to malware. Apparently it was sent from Careerbuilder (which is kind of odd). Also note the ...

Another malicious spam, this time with an attachment containing obfuscated code leading to caskjfhlkaspsfg.ru . Date :      Thu, 1 Mar ...

DINETHOSTING aka Digital Network JSC are a large Russian host that regularly hosts malware sites. Yesterday I came across the domain curvech...

BBB spam.. you must know what it looks like by now. Here are a couple of new domains: perikanzas.com 41.64.21.71 (Dynamic ADSL, Egypt) ...

This spam comes with a malicious attachment pointing to a page on cparabnormapoopdsf.ru . Date :      Tue, 27 Feb 2012 03:53:09 +0530 ...

Another IRS spam run leading to malware, this time on pollypeach.com . Date:      Tue, 27 Feb 2012 17:02:45 +0600 From:      "Ofe...

A terse version of the familiar NACHA fake spam, leading to malware: Date :      Mon, 26 Feb 2012 12:16:40 +0530 From :      accountin...